Problème virus (trojans,adware et spyware)

--
Frédéric
pas très fort en info

Oui, mais j'ai pas trouvé de fichier qui s'appelle jjkidkmj.exe puis j'ai fait un rapport avec HijackThis comme tu me la dit dont le voici:


7-Zip 4.39 beta
Ad-Aware SE Personal
Adobe Acrobat 5.0
Archiveur WinRAR
a-squared Free 1.6.5
avast! Antivirus
Barre d'outils MSN
BitSpirit v3.2.0.080 Stable Release
CCleaner (remove only)
Correctif pour le Lecteur Windows Media [Voir Q828026 pour plus d'informations]
Correctif Windows XP - KB820291
Correctif Windows XP - KB821253
Correctif Windows XP - KB822603
Correctif Windows XP - KB823182
Correctif Windows XP - KB824105
Correctif Windows XP - KB826939
Correctif Windows XP - KB826942
Correctif Windows XP - KB828035
Correctif Windows XP - KB828741
Correctif Windows XP - KB833987
Correctif Windows XP - KB835732
Correctif Windows XP - KB837001
Correctif Windows XP - KB839645
Correctif Windows XP - KB840374
Correctif Windows XP - KB840987
Correctif Windows XP - KB841356
Correctif Windows XP - KB841533
Correctif Windows XP - KB841873
Correctif Windows XP - KB842773
Correctif Windows XP - KB871250
Correctif Windows XP - KB873339
Correctif Windows XP - KB873376
Correctif Windows XP - KB885250
Correctif Windows XP - KB885835
Correctif Windows XP - KB885836
Correctif Windows XP - KB887797
Correctif Windows XP - KB888113
Correctif Windows XP - KB888302
Correctif Windows XP - KB890859
Correctif Windows XP - KB891781
Correctif Windows XP - KB897715
Correctif Windows XP - KB905915
Correctif Windows XP - KB911567
Correctif Windows XP - KB912812
Correctif Windows XP (SP2) Q322011
Correctif Windows XP (SP2) Q327979
Correctif Windows XP (SP2) Q814995
DH Driver Cleaner Professional Edition
Driver Wizard by 62NDS Solutions
eMule Plus 1.2
Eraser
EVEREST Home Edition v2.20
HijackThis 1.99.1
IE Privacy Keeper
J2SE Runtime Environment 5.0 Update 6
Language pack for Ad-Aware SE
Lecteur Windows Media 10
Macromedia Flash Player 8
Messenger Plus! 3
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 French Language Pack
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft Baseline Security Analyzer 2.0
Microsoft Office 2000 SR-1 Professional
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)
Mise à jour de sécurité pour Windows XP (KB890046)
Mise à jour de sécurité pour Windows XP (KB893756)
Mise à jour de sécurité pour Windows XP (KB896358)
Mise à jour de sécurité pour Windows XP (KB896422)
Mise à jour de sécurité pour Windows XP (KB896423)
Mise à jour de sécurité pour Windows XP (KB896424)
Mise à jour de sécurité pour Windows XP (KB896428)
Mise à jour de sécurité pour Windows XP (KB899587)
Mise à jour de sécurité pour Windows XP (KB899591)
Mise à jour de sécurité pour Windows XP (KB900725)
Mise à jour de sécurité pour Windows XP (KB901017)
Mise à jour de sécurité pour Windows XP (KB901214)
Mise à jour de sécurité pour Windows XP (KB902400)
Mise à jour de sécurité pour Windows XP (KB905414)
Mise à jour de sécurité pour Windows XP (KB905495)
Mise à jour de sécurité pour Windows XP (KB905749)
Mise à jour de sécurité pour Windows XP (KB908519)
Mise à jour de sécurité pour Windows XP (KB908531)
Mise à jour de sécurité pour Windows XP (KB911562)
Mise à jour de sécurité pour Windows XP (KB911927)
Mise à jour de sécurité pour Windows XP (KB912919)
Mise à jour de sécurité pour Windows XP (KB913446)
Mise à jour pour Windows XP (KB835409)
Mise à jour pour Windows XP (KB898461)
Mise à jour pour Windows XP (KB910437)
Mozilla Firefox (1.5.0.2)
Mozilla Thunderbird (1.5)
MSN Messenger 7.5
NVIDIA Display Driver
Pack réseau avancé pour Windows XP
Package de base Microsoft de service de chiffrement pour cartes à puce
PCI Audio Driver
RegistryFix v5.5
RivaTuner v2.0 RC 15.7
Serious Sam FE Patch Français
Serious Sam: The First Encounter
Service Pack 1a pour Windows XP
SpyBlocker
Spybot - Search & Destroy 1.4
SUPERAntiSpyware Free Edition
SuperCopier2
TuneUp Utilities 2006
UltraISO V7.66 ME
Unlocker 1.8.1
WinAce Archiver
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
WinISO 5.3
WinZip
Zero Popup Pro

Voilà et puis je voudrais savoir si je me suis bien débarassé de ces vilains trojans: trojan.swizzor.DH , Trojan.Lopad.K et trojan.downloader.6588 E

Voilà, merci de bien vouloir continuer de m'aider a tout virer ces vilains vers,virus,trojans,adware...

Voilà,a++++

--
Frédéric
pas très fort en info

Bon voilà la suite comme je t'avais prédit

Voilà le rapport de spybot:

--- Search result list ---
Winsoftware.WinAntiVirusPro2006: Groupe de programmes (Répertoire, fixed)
C:\Documents and Settings\All Users\Application Data\WinAntiVirus Pro 2006\

Winsoftware.WinAntiVirusPro2006: Dossier Application data (Répertoire, fixed)
C:\Program Files\Fichiers communs\WinAntiVirus Pro 2006\

Winsoftware.WinAntiVirusPro2006: Donnée (Fichier, fixed)
C:\Documents and Settings\Propriétaire\Local Settings\Temp\wa6Support.log

IAGold: Interface (IViewSource) (Clé du registre, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\Interface\{15DD3623-7BA1-4348-81AF-D9244B355193}

Winsoftware: Cookie traceur (Internet Explorer: Propriétaire) (Cookie, fixed)

Common Dialogs: History (2 files) (Clé du registre, nothing done)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU

Log: Activity: SchedLgU.Txt (Sauver le fichier, nothing done)
C:\WINDOWS\SchedLgU.Txt

Log: Activity: imsins.log (Sauver le fichier, nothing done)
C:\WINDOWS\imsins.log

Log: Activity: ntbtlog.txt (Sauver le fichier, nothing done)
C:\WINDOWS\ntbtlog.txt

Log: Install: comsetup.log (Sauver le fichier, nothing done)
C:\WINDOWS\comsetup.log

Log: Install: ocgen.log (Sauver le fichier, nothing done)
C:\WINDOWS\ocgen.log

Log: Install: setupapi.log (Sauver le fichier, nothing done)
C:\WINDOWS\setupapi.log

Log: Install: wmsetup.log (Sauver le fichier, nothing done)
C:\WINDOWS\wmsetup.log

Log: Shutdown: System32\wbem\logs\wbemess.lo_ (Sauver le fichier, nothing done)
C:\WINDOWS\System32\wbem\logs\wbemess.lo_

Log: Shutdown: System32\wbem\logs\wbemess.log (Sauver le fichier, nothing done)
C:\WINDOWS\System32\wbem\logs\wbemess.log

Log: Shutdown: System32\wbem\logs\winmgmt.log (Sauver le fichier, nothing done)
C:\WINDOWS\System32\wbem\logs\winmgmt.log

Log: Shutdown: System32\wbem\logs\wmiprov.log (Sauver le fichier, nothing done)
C:\WINDOWS\System32\wbem\logs\wmiprov.log

7-Zip: Extracted archives history (1 fichiers) (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\7-ZIP\Extraction\PathHistory

7-Zip: Folder history (Valeur du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\7-ZIP\FM\FolderHistory

7-Zip: Last used folder (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\7-ZIP\FM\PanelPath0!=

Ahead Nero Burning Rom: Browser directory (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Ahead\Nero - Burning Rom\Settings\BrowserDir!=

Ahead Nero Burning Rom: Working directory (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Ahead\Nero - Burning Rom\Settings\WorkingDir!=

MS Media Player: Anonymous ID (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Microsoft\MediaPlayer\Preferences\SendUserGUID!=B=0

MS Office 9.0 (Word): Recently used file list (Valeur du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Microsoft\Office\9.0\Word\Data\Settings

MS Search Assistant: Typed search terms history (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Microsoft\Search Assistant\ACMru

Windows.OpenWith: Open with list - .BIN extension (2 fichiers) (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BIN\OpenWithList

Windows.OpenWith: Open with list - .CUE extension (3 fichiers) (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CUE\OpenWithList

Windows Explorer: User Assistant history IE (7 fichiers) (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count

Windows Explorer: User Assistant history files (92 fichiers) (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Windows Explorer: Last visited history (2 fichiers) (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU

Windows Explorer: Recent file global history (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

Windows Media SDK: Computer name (Modification du registre, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Media\WMSDK\General\ComputerName!=ComputerName

Windows Media SDK: Computer name (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Microsoft\Windows Media\WMSDK\General\ComputerName!=ComputerName

Windows Media SDK: Computer name (Modification du registre, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows Media\WMSDK\General\ComputerName!=ComputerName

WinZip: Recent extracted file list (1 fichiers) (Clé du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Nico Mak Computing\WinZip\extract

WinZip: Number of times run (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Nico Mak Computing\WinZip\rrs\Opened!=

WinZip: Default directory (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Nico Mak Computing\WinZip\directories\DefDir!=

WinZip: Default directory (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Nico Mak Computing\WinZip\directories\zDefDir!=

WinZip: Add files directory (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Nico Mak Computing\WinZip\directories\AddDir!=

WinZip: Destination directory (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Nico Mak Computing\WinZip\directories\ExtractTo!=

WinZip: Add files directory (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Nico Mak Computing\WinZip\directories\gzAddDir!=

WinZip: Destination directory (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-1078145449-1708537768-1003\Software\Nico Mak Computing\WinZip\directories\gzExtractTo!=

Cookie: Cookie (28) (Cookie, nothing done)

Cache: Cache (359) (Cache, nothing done)

Cookie: Cookie (78) (Cookie, nothing done)

--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2006-02-24 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-04-14 Includes\Cookies.sbi (*)
2006-04-14 Includes\Dialer.sbi (*)
2006-04-14 Includes\Hijackers.sbi (*)
2006-04-14 Includes\Keyloggers.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2006-04-14 Includes\Malware.sbi (*)
2006-04-14 Includes\PUPS.sbi (*)
2006-04-14 Includes\Revision.sbi (*)
2006-04-14 Includes\Security.sbi (*)
2006-04-14 Includes\Spybots.sbi (*)
2005-02-17 Includes\Tracks.uti (*)
2006-04-14 Includes\Trojans.sbi (*)

--- System information ---
Windows XP (Build: 2600) Service Pack 1
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Hotfix (KB886903)
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
/ DataAccess: Security Update for Microsoft Data Access Components
/ Internet Explorer 6 / SP0: Correctif Windows XP - Article Base de Connaissances 834707
/ Internet Explorer 6 / SP1: Correctif Windows XP - KB905915
/ Internet Explorer 6 / SP1: Correctif Windows XP - KB912812
/ Outlook Express 6 / SP1: Correctif Windows XP - KB887797
/ Outlook Express 6 / SP1: Correctif Windows XP - KB897715
/ Outlook Express 6 / SP1: Correctif Windows XP - KB911567
/ Windows Media Player: Correctif pour le Lecteur Windows Media [Voir Q828026 pour plus d'informations]
/ Windows Media Player / SP0: Correctif pour le Lecteur Windows Media [Voir Q828026 pour plus d'informations]
/ Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)
/ Windows XP / SP1: Service Pack 1a pour Windows XP
/ Windows XP / SP1: Windows XP Hotfix (SP1) [See Q329048 for more information]
/ Windows XP / SP1: Windows XP Hotfix (SP1) Q329170
/ Windows XP / SP1: Windows XP Hotfix (SP1) [See Q329390 for more information]
/ Windows XP / SP1: Windows XP Hotfix (SP1) [See Q329441 for more information]
/ Windows XP / SP1: Windows XP Hotfix (SP1) [See Q329834 for more information]
/ Windows XP / SP1: Windows XP Hotfix (SP1) Q810577
/ Windows XP / SP1: Windows XP Hotfix (SP1) Q810833
/ Windows XP / SP1: Windows XP Hotfix (SP1) Q811630
/ Windows XP / SP1: Windows XP Hotfix (SP1) Q817606
/ Windows XP / SP2: Windows XP Hotfix (SP2) [See KB810243 for more information]
/ Windows XP / SP2: Pack réseau avancé pour Windows XP
/ Windows XP / SP2: Correctif Windows XP - KB820291
/ Windows XP / SP2: Correctif Windows XP - KB821253
/ Windows XP / SP2: Correctif Windows XP - KB822603
/ Windows XP / SP2: Correctif Windows XP - KB823182
/ Windows XP / SP2: Correctif Windows XP - KB823559
/ Windows XP / SP2: Correctif Windows XP - KB824105
/ Windows XP / SP2: Correctif Windows XP - KB826939
/ Windows XP / SP2: Correctif Windows XP - KB826942
/ Windows XP / SP2: Correctif Windows XP - KB828035
/ Windows XP / SP2: Correctif Windows XP - KB828741
/ Windows XP / SP2: Correctif Windows XP - KB833987
/ Windows XP / SP2: Mise à jour pour Windows XP (KB835409)
/ Windows XP / SP2: Correctif Windows XP - KB835732
/ Windows XP / SP2: Correctif Windows XP - KB837001
/ Windows XP / SP2: Correctif Windows XP - KB839645
/ Windows XP / SP2: Correctif Windows XP - KB840374
/ Windows XP / SP2: Correctif Windows XP - KB840987
/ Windows XP / SP2: Correctif Windows XP - KB841356
/ Windows XP / SP2: Correctif Windows XP - KB841533
/ Windows XP / SP2: Correctif Windows XP - KB841873
/ Windows XP / SP2: Correctif Windows XP - KB842773
/ Windows XP / SP2: Correctif Windows XP - KB871250
/ Windows XP / SP2: Correctif Windows XP - KB873376
/ Windows XP / SP2: Mise à jour de sécurité pour Windows XP (KB905495)
/ Windows XP / SP2: Mise à jour de sécurité pour Windows XP (KB914798)
/ Windows XP / SP2: Correctif Windows XP (SP2) Q322011
/ Windows XP / SP2: Package du correctif Windows XP [voir Q323255 pour plus de détails]
/ Windows XP / SP2: Correctif Windows XP (SP2) Q327979
/ Windows XP / SP2: Package du correctif Windows XP [voir Q329048 pour plus de détails]
/ Windows XP / SP2: Package du correctif Windows XP [voir Q329115 pour plus de détails]
/ Windows XP / SP2: Correctif Windows XP (SP2) Q329170
/ Windows XP / SP2: Package du correctif Windows XP [voir Q329390 pour plus de détails]
/ Windows XP / SP2: Correctif Windows XP (SP2) Q329441
/ Windows XP / SP2: Package du correctif Windows XP [voir Q329834 pour plus de détails]
/ Windows XP / SP2: Correctif Windows XP (SP2) Q810577
/ Windows XP / SP2: Correctif Windows XP (SP2) Q810833
/ Windows XP / SP2: Correctif Windows XP (SP2) Q811630
/ Windows XP / SP2: Correctif Windows XP (SP2) Q814995
/ Windows XP / SP2: Correctif Windows XP (SP2) Q817606
/ Windows XP / SP3: Correctif Windows XP - KB873339
/ Windows XP / SP3: Correctif Windows XP - KB885250
/ Windows XP / SP3: Correctif Windows XP - KB885835
/ Windows XP / SP3: Correctif Windows XP - KB885836
/ Windows XP / SP3: Correctif Windows XP - KB888113
/ Windows XP / SP3: Correctif Windows XP - KB888302
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB890046)
/ Windows XP / SP3: Correctif Windows XP - KB890859
/ Windows XP / SP3: Correctif Windows XP - KB891781
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893756)
/ Windows XP / SP3: Windows Installer 3.1 (KB893803)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896358)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896422)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896423)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896424)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896428)
/ Windows XP / SP3: Mise à jour pour Windows XP (KB898461)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899587)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899591)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900725)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901017)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901214)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB902400)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB904706)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905414)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905749)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908519)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908531)
/ Windows XP / SP3: Mise à jour pour Windows XP (KB910437)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911562)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911927)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912919)
/ Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913446)

--- Startup entries list ---
Located: HK_LM:Run,
command:
file:

Located: HK_LM:Run, avast!
command: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
file: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
size: 102448
MD5: 9eb989d83225f2e6d9ecfdccdd0db0ca

Located: HK_LM:Run, CBitSpirit
command: "C:\Program Files\BitSpirit\BitSpirit.exe" /start
file: C:\Program Files\BitSpirit\BitSpirit.exe
size: 5168128
MD5: 344c1527e7d8f4f60709f73a7ca0dca8

Located: HK_LM:Run, C-Media Mixer
command: Mixer.exe /startup
file: C:\WINDOWS\Mixer.exe
size: 1818624
MD5: f83709d0bacba84d297183825f089d98

Located: HK_LM:Run, MessengerPlus3
command: "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
file: C:\Program Files\MessengerPlus! 3\MsgPlus.exe
size: 190024
MD5: f5f3a19013808113b1f3dada4379606a

Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
file: C:\WINDOWS\system32\RUNDLL32.EXE
size: 32256
MD5: ac0f912ea7571e9c1ad7b64c83f72bd9

Located: HK_LM:Run, NvMediaCenter
command: RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
file: C:\WINDOWS\system32\RUNDLL32.EXE
size: 32256
MD5: ac0f912ea7571e9c1ad7b64c83f72bd9

Located: HK_LM:Run, nwiz
command: nwiz.exe /install
file: C:\WINDOWS\system32\nwiz.exe
size: 753664
MD5: aa022dfa622c90c3060ca794914b11aa

Located: HK_LM:Run, PPMemCheck
command: c:\PROGRA~1\PESTPA~1\PPMemCheck.exe
file: c:\PROGRA~1\PESTPA~1\PPMemCheck.exe
size: 148480
MD5: 8783db0b018082051fb4ba3b9e0237cd

Located: HK_LM:Run, SunJavaUpdateSched
command: C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
file: C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
size: 36975
MD5: 61a3a9d5d98bf0331df5b716144a8100

Located: HK_CU:Run,
command:
file:

Located: HK_CU:Run, Eraser
command: C:\Program Files\Eraser\eraser.exe -hide
file:

Located: HK_CU:Run, MessengerPlus3
command: "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
file: C:\Program Files\MessengerPlus! 3\MsgPlus.exe
size: 190024
MD5: f5f3a19013808113b1f3dada4379606a

Located: HK_CU:Run, msn
command: C:\Program Files\MSN\MSNCoreFiles\MSN6.EXE -email
file:

Located: HK_CU:Run, SuperCopier2.exe
command: C:\Program Files\SuperCopier2\SuperCopier2.exe
file: C:\Program Files\SuperCopier2\SuperCopier2.exe
size: 1057280
MD5: 6a2fc790cd507336e05b7fae29d79432

Located: System.ini, crypt32chain
command: crypt32.dll
file: crypt32.dll

Located: System.ini, cryptnet
command: cryptnet.dll
file: cryptnet.dll

Located: System.ini, cscdll
command: cscdll.dll
file: cscdll.dll

Located: System.ini, ScCertProp
command: wlnotify.dll
file: wlnotify.dll

Located: System.ini, Schedule
command: wlnotify.dll
file: wlnotify.dll

Located: System.ini, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll

Located: System.ini, SensLogn
command: WlNotify.dll
file: WlNotify.dll

Located: System.ini, termsrv
command: wlnotify.dll
file: wlnotify.dll

Located: System.ini, wlballoon
command: wlnotify.dll
file: wlnotify.dll

--- Browser helper object list ---
{00E32D74-09D8-202E-7667-AD2C00DBE41E} ()
BHO name:
CLSID name:

{0BBF11BB-13A4-4F02-9AAB-00EC0ACEAEAA} ()
BHO name:
CLSID name:

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
BHO name:
CLSID name: SSVHelper Class
Path: C:\Program Files\Java\jre1.5.0_06\bin\
Long name: ssv.dll
Short name:
Date (created): 10/11/2005 14:03:56
Date (last access): 17/04/2006 08:18:02
Date (last write): 10/11/2005 14:22:10
Filesize: 184423
Attributes: archive
MD5: F01726F7CA8538FDD4663C9DB8FEAEDC
CRC32: 0111B892
Version: 5.0.60.5

{8FE99860-6F43-4D08-999D-06713E419426} ()
BHO name:
CLSID name:

{9394EDE7-C8B5-483E-8773-474BF36AF6E4} (ST)
BHO name:
CLSID name: ST
Path: C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\
Long name: stmain.dll
Short name:
Date (created): 23/02/2006 10:39:36
Date (last access): 17/04/2006 08:18:02
Date (last write): 13/08/2004 18:42:00
Filesize: 155648
Attributes: archive
MD5: 0DA1349495955CB41A5899047C5A1267
CRC32: C050EECD
Version: 1.2.3000.1001

{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (MSNToolBandBHO)
BHO name:
CLSID name: MSNToolBandBHO
Path: C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\
Long name: msntb.dll
Short name:
Date (created): 23/02/2006 10:37:04
Date (last access): 17/04/2006 08:18:02
Date (last write): 17/01/2006 17:04:16
Filesize: 282624
Attributes: archive
MD5: 6B3B0C6657B3DFEAD7ABC5BFEE45B347
CRC32: 1DF31317
Version: 1.2.5000.1021

--- ActiveX list ---
{867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control)
DPF name:
CLSID name: HardwareDetection Control
Installer: C:\WINDOWS\Downloaded Program Files\HardwareDetection.inf
Codebase: http://drivers1.free.fr/hardwaredetection.cab
Path: C:\PROGRA~1\HARDWA~1\IE\
Long name: HardwareDetection.ocx
Short name: HARDWA~1.OCX
Date (created): 03/03/2006 11:52:06
Date (last access): 17/04/2006 08:35:50
Date (last write): 03/03/2006 11:52:06
Filesize: 364544
Attributes: archive
MD5: 05A07DA7627FC038D4542F58FDC971F8
CRC32: 39937B2D
Version: 2.0.1.5

{9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class)
DPF name:
CLSID name: ActiveScan Installer Class
Installer: C:\WINDOWS\Downloaded Program Files\asinst.inf
Codebase: http://acs.pandasoftware.com/activescan/as5free/asinst.cab
description:
classification: Open for discussion
known filename: ASINST.DLL
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\Downloaded Program Files\
Long name: asinst.dll
Short name:
Date (created): 19/12/2005 13:35:32
Date (last access): 17/04/2006 08:12:32
Date (last write): 19/12/2005 13:35:32
Filesize: 135168
Attributes: archive
MD5: 20C07B231040B49AFCE82397BFC35F9C
CRC32: 9301377D
Version: 58.4.0.0

{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
DPF name: Java Runtime Environment 1.5.0
CLSID name: Java Plug-in 1.5.0_06
Installer:
Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
Path: C:\Program Files\Java\jre1.5.0_06\bin\
Long name: NPJPI150_06.dll
Short name: NPJPI1~1.DLL
Date (created): 10/11/2005 14:03:56
Date (last access): 17/04/2006 08:35:50
Date (last write): 10/11/2005 14:22:10
Filesize: 69746
Attributes: archive
MD5: D2CF6BB5E9020E6707B62575F8083954
CRC32: 7F39DC54
Version: 5.0.60.5

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
DPF name: Java Runtime Environment 1.5.0
CLSID name: Java Plug-in 1.5.0_06
Installer:
Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
Path: C:\Program Files\Java\jre1.5.0_06\bin\
Long name: NPJPI150_06.dll
Short name: NPJPI1~1.DLL
Date (created): 10/11/2005 14:03:56
Date (last access): 17/04/2006 08:35:50
Date (last write): 10/11/2005 14:22:10
Filesize: 69746
Attributes: archive
MD5: D2CF6BB5E9020E6707B62575F8083954
CRC32: 7F39DC54
Version: 5.0.60.5

{E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class)
DPF name:
CLSID name: AcceptLang Class
Installer:
Codebase: http://runonce.msn.com/setacceptlang.cab
description:
classification: Open for discussion
known filename: setacceptlang.dll
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\Downloaded Program Files\
Long name: setacceptlang.dll
Short name: SETACC~1.DLL
Date (created): 28/06/2001 01:02:38
Date (last access): 17/04/2006 08:12:34
Date (last write): 28/06/2001 01:02:38
Filesize: 40960
Attributes: archive
MD5: 78D69713471201889366CAC519B02C36
CRC32: 1E18E9BE
Version: 1.0.0.1

--- Process list ---
PID: 0 ( 0) [System]
PID: 508 ( 4) \SystemRoot\System32\smss.exe
PID: 556 ( 508) \??\C:\WINDOWS\system32\csrss.exe
PID: 580 ( 508) \??\C:\WINDOWS\system32\winlogon.exe
PID: 628 ( 580) C:\WINDOWS\system32\services.exe
size: 101888
MD5: FC0691097471EE374907E1024EDCBD43
PID: 640 ( 580) C:\WINDOWS\system32\lsass.exe
size: 11776
MD5: B7B1C150AFF59455DB4DF082815F88F5
PID: 804 ( 628) C:\WINDOWS\system32\svchost.exe
size: 12800
MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
PID: 872 ( 628) C:\WINDOWS\System32\svchost.exe
size: 12800
MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
PID: 980 ( 628) C:\WINDOWS\System32\svchost.exe
size: 12800
MD5: 333A4DB8410D8E24DB06D6AEBECDC7C2
PID: 1192 (1168) C:\WINDOWS\Explorer.EXE
size: 1000448
MD5: F5909963533D861D169B737A1A8E1EF8
PID: 1984 (1192) C:\Program Files\Internet Explorer\iexplore.exe
size: 91136
MD5: 9DB9CEF1BF78C4ECC8366C1DC959AC89
PID: 376 (1192) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 4393096
MD5: 09CA174A605B480318731E691DC98539
PID: 1156 (1192) C:\Program Files\CCleaner\ccleaner.exe
size: 569344
MD5: 470FAEB7B603689872E92B28B396750D
PID: 4 ( 0) System

--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 17/04/2006 08:37:12

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\System32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
about:blank
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant
http://www.bing.com/spresults.aspx
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
http://home.microsoft.com/access/autosearch.asp?p=%s
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm

--- Winsock Layered Service Provider list ---

--- Uninstall list ---
7-Zip 4.39 beta (7-Zip)
uninstall cmd: "C:\Program Files\7-Zip\Uninstall.exe"

a-squared Free 1.6.5 1.6 (a-squared Free_is1)
install location: C:\Program Files\a-squared\
uninstall cmd: "C:\Program Files\a-squared\unins000.exe"
publisher: Emsi Software GmbH
comments: a-squared
help link: https://support.emsisoft.com/

Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal)
uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
publisher: Lavasoft
help link: https://www.adaware.com/

Adobe Acrobat 5.0 5.0 (Adobe Acrobat 5.0)
version (major): 5
install location: C:\Program Files\Adobe\Acrobat 5.0
install source: C:\Documents and Settings\Propriétaire\Local Settings\Temp\pft44E~tmp\
uninstall cmd: C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
publisher: Adobe Systems, Inc.
help link: https://acrobat.adobe.com/us/en/acrobat.html

avast! Antivirus 4.6 (avast!)
version (major): 4
version (minor): 6
install location: C:\PROGRA~1\ALWILS~1\Avast4
install source: C:\DOCUME~1\PROPRI~1\Bureau\PROTEG~1\FORMAT~1\LOGICI~1
uninstall cmd: rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup
publisher: Alwil Software
help link: https://www.avast.com/fr-fr/index

BitSpirit v3.2.0.080 Stable Release (BitSpirit_is1)
uninstall cmd: "C:\Program Files\BitSpirit\unins000.exe"
publisher: LANSPIRIT.NET
help link: http://www.bytelinker.com/forum/

(Branding)

CCleaner (remove only) (CCleaner)
uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"

(Connection Manager)

DH Driver Cleaner Professional Edition Version 1.4 (Driver Cleaner Pro)
uninstall cmd: C:\Program Files\Driver Cleaner Pro\Uninst.exe
publisher: Ruud Ketelaars
comments: Date January 21, 2006

Driver Wizard by 62NDS Solutions (DriverWizard)
uninstall cmd: uninst62.exe "C:\Program Files\Driver Wizard\INSTALL.LOG"

eMule Plus 1.2 (eMule Plus_is1)
install location: C:\Program Files\eMule\
uninstall cmd: "C:\Program Files\eMule\unins000.exe"
publisher: eMule Plus Team
help link: http://emuleplus.info/forum/index.php?showforum=23

Eraser 5.7 (Eraser_is1)
uninstall cmd: "C:\Program Files\Eraser\unins000.exe"
publisher: Heidi Computers Ltd
help link: http://www.heidi.ie/eraser/

EVEREST Home Edition v2.20 2.20 (EVEREST Home Edition_is1)
install location: C:\Program Files\Lavalys\EVEREST Home Edition\
uninstall cmd: "C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
publisher: Lavalys Inc
help link: http://www.lavalys.com

ewido anti-malware (ewidoantimalware)
install location: C:\Program Files\ewido anti-malware
uninstall cmd: C:\Program Files\ewido anti-malware\Uninstall.exe
publisher: ewido networks
help link: https://www.avg.com/en-us/free-antivirus-download

HijackThis 1.99.1 1.99.1 (HijackThis)
uninstall cmd: C:\Documents and Settings\Propriétaire\Bureau\protege PC\Formatage & Sécurité\protection de données personnelles\hijackthis\HijackThis.exe /uninstall
publisher: Soeperman Enterprises Ltd.

IE Privacy Keeper (IE Privacy Keeper)
uninstall cmd: C:\Program Files\UnH Solutions\IE Privacy Keeper\unins000.exe

Pack réseau avancé pour Windows XP (KB817778)
uninstall cmd: C:\WINDOWS\$NtUninstallKB817778$\spuninst\spuninst.exe
publisher: Microsoft Corporation

Correctif Windows XP - KB820291 20030529.114940 (KB820291)
uninstall cmd: C:\WINDOWS\$NtUninstallKB820291$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/820291

Correctif Windows XP - KB821253 20030609.161207 (KB821253)
uninstall cmd: C:\WINDOWS\$NtUninstallKB821253$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/821253

Correctif Windows XP - KB822603 20030703.195358 (KB822603)
uninstall cmd: C:\WINDOWS\$NtUninstallKB822603$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/822603

Correctif Windows XP - KB823182 20030724.164137 (KB823182)
uninstall cmd: C:\WINDOWS\$NtUninstallKB823182$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/823182

Correctif Windows XP - KB824105 20030724.164954 (KB824105)
uninstall cmd: C:\WINDOWS\$NtUninstallKB824105$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/824105/

Correctif Windows XP - KB826939 20030902.221438 (KB826939)
uninstall cmd: C:\WINDOWS\$NtUninstallKB826939$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/826939

Correctif Windows XP - KB826942 20031007.111550 (KB826942)
uninstall cmd: C:\WINDOWS\$NtUninstallKB826942$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/826942

Correctif Windows XP - KB828035 20031021.165340 (KB828035)
uninstall cmd: C:\WINDOWS\$NtUninstallKB828035$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/828035

Correctif Windows XP - KB828741 20040305.182524 (KB828741)
uninstall cmd: C:\WINDOWS\$NtUninstallKB828741$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/828741/ms04-012-cumulative-update-for-microsoft-rpc-dcom

Correctif Windows XP - KB833987 20040308.224701 (KB833987)
uninstall cmd: C:\WINDOWS\$NtUninstallKB833987$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/833987

Mise à jour pour Windows XP (KB835409) 1 (KB835409)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB835409$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/835409

Correctif Windows XP - KB835732 20040329.175712 (KB835732)
uninstall cmd: C:\WINDOWS\$NtUninstallKB835732$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/835732/ms04-011-security-update-for-microsoft-windows

Correctif Windows XP - KB837001 20040419.142635 (KB837001)
uninstall cmd: C:\WINDOWS\$NtUninstallKB837001$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/837001

Correctif Windows XP - KB839645 20040630.164654 (KB839645)
uninstall cmd: C:\WINDOWS\$NtUninstallKB839645$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/839645

Correctif Windows XP - KB840374 20040416.100336 (KB840374)
uninstall cmd: C:\WINDOWS\$NtUninstallKB840374$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/840374

Correctif Windows XP - KB840987 20040927.095912 (KB840987)
uninstall cmd: C:\WINDOWS\$NtUninstallKB840987$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/840987

Correctif Windows XP - KB841356 20040929.102221 (KB841356)
uninstall cmd: C:\WINDOWS\$NtUninstallKB841356$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/841356

Correctif Windows XP - KB841533 20040927.100142 (KB841533)
uninstall cmd: C:\WINDOWS\$NtUninstallKB841533$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/841533

Correctif Windows XP - KB841873 20040608.144346 (KB841873)
uninstall cmd: C:\WINDOWS\$NtUninstallKB841873$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/841873/ms04-022-a-vulnerability-in-task-scheduler-could-allow-code-execution

Correctif Windows XP - KB842773 20040805.140010 (KB842773)
uninstall cmd: C:\WINDOWS\$NtUninstallKB842773$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/842773

Correctif Windows XP - KB871250 20041028.084225 (KB871250)
uninstall cmd: C:\WINDOWS\$NtUninstallKB871250$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/871250

Correctif Windows XP - KB873339 20041117.094106 (KB873339)
uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/873339

Correctif Windows XP - KB873376 20040923.181029 (KB873376)
uninstall cmd: C:\WINDOWS\$NtUninstallKB873376$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/873376

(KB884016)

Correctif Windows XP - KB885250 20050119.075718 (KB885250)
uninstall cmd: C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/885250

Correctif Windows XP - KB885835 20041027.181751 (KB885835)
uninstall cmd: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/885835/ms04-044-vulnerabilities-in-windows-kernel-and-lsass-could-allow-eleva

Correctif Windows XP - KB885836 20041028.161024 (KB885836)
uninstall cmd: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/885836/ms04-041-a-vulnerability-in-wordpad-could-allow-code-execution

Correctif Windows XP - KB887797 20041112.131144 (KB887797-OE6SP1-20041112.131144)
uninstall cmd: C:\WINDOWS\$NtUninstallKB887797-OE6SP1-20041112.131144$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/887797

Correctif Windows XP - KB888113 20041116.131259 (KB888113)
uninstall cmd: C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/888113

Correctif Windows XP - KB888302 20041207.112156 (KB888302)
uninstall cmd: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/888302

Mise à jour de sécurité pour Windows XP (KB890046) 1 (KB890046)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/890046

Correctif Windows XP - KB890859 1 (KB890859)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/890859

Correctif Windows XP - KB891781 20050110.171604 (KB891781)
uninstall cmd: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/891781

Mise à jour de sécurité pour Windows XP (KB893756) 1 (KB893756)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/893756

(KB893803)

Windows Installer 3.1 (KB893803) 3.1 (KB893803v2)
uninstall cmd: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/893803/windows-installer-3-1-v2-3-1-4000-2435-is-available

Mise à jour de sécurité pour Windows XP (KB896358) 1 (KB896358)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/896358/ms05-026-a-vulnerability-in-html-help-could-allow-remote-code-executio

Mise à jour de sécurité pour Windows XP (KB896422) 1 (KB896422)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/896422/ms05-027-vulnerability-in-server-message-block-could-allow-remote-code

Mise à jour de sécurité pour Windows XP (KB896423) 1 (KB896423)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/windows?ui=en-US&rs=en-001&ad=US

Mise à jour de sécurité pour Windows XP (KB896424) 1 (KB896424)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/896424

Mise à jour de sécurité pour Windows XP (KB896428) 1 (KB896428)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/896428

Correctif Windows XP - KB897715 20050503.210336 (KB897715-OE6SP1-20050503.210336)
uninstall cmd: "C:\WINDOWS\$NtUninstallKB897715-OE6SP1-20050503.210336$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/897715

Mise à jour pour Windows XP (KB898461) 1 (KB898461)
install date: 20060223
uninstall cmd: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/898461/

Mise à jour de sécurité pour Windows XP (KB899587) 1 (KB899587)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/899587

Mise à jour de sécurité pour Windows XP (KB899591) 1 (KB899591)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/899591

Mise à jour de sécurité pour Windows XP (KB900725) 1 (KB900725)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/900725

Mise à jour de sécurité pour Windows XP (KB901017) 1 (KB901017)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/901017

Mise à jour de sécurité pour Windows XP (KB901214) 1 (KB901214)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/901214

Mise à jour de sécurité pour Windows XP (KB902400) 1 (KB902400)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/902400/ms05-051-vulnerabilities-in-ms-dtc-and-com-could-allow-remote-code-exe

Mise à jour de sécurité pour Windows XP (KB905414) 1 (KB905414)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/905414

Mise à jour de sécurité pour Windows XP (KB905495) 1 (KB905495)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB905495$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/905495

Mise à jour de sécurité pour Windows XP (KB905749) 1 (KB905749)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/905749

Correctif Windows XP - KB905915 20051122.175908 (KB905915-IE6SP1-20051122.175908)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB905915-IE6SP1-20051122.175908$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/905915

Mise à jour de sécurité pour Windows XP (KB908519) 1 (KB908519)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/908519

Mise à jour de sécurité pour Windows XP (KB908531) 1 (KB908531)
install date: 20060415
uninstall cmd: "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/908531

Package de base Microsoft de service de chiffrement pour cartes à puce (KB909520)
uninstall cmd: "C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
publisher: Microsoft Corporation

Mise à jour pour Windows XP (KB910437) 1 (KB910437)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/910437

Mise à jour de sécurité pour Windows XP (KB911562) 1 (KB911562)
install date: 20060415
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/911562

Mise à jour de sécurité pour Lecteur Windows Media (KB911564) (KB911564)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/911564

Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) (KB911565)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/911565

Correctif Windows XP - KB911567 20060316.165634 (KB911567-OE6SP1-20060316.165634)
install date: 20060415
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911567-OE6SP1-20060316.165634$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/911567

Mise à jour de sécurité pour Windows XP (KB911927) 1 (KB911927)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/911927

Correctif Windows XP - KB912812 20060322.182418 (KB912812-IE6SP1-20060322.182418)
install date: 20060415
uninstall cmd: "C:\WINDOWS\$NtUninstallKB912812-IE6SP1-20060322.182418$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/912812/ms06-013-cumulative-security-update-for-internet-explorer

Mise à jour de sécurité pour Windows XP (KB912919) 1 (KB912919)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/912919

Mise à jour de sécurité pour Windows XP (KB913446) 1 (KB913446)
install date: 20060224
uninstall cmd: "C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/913446

Language pack for Ad-Aware SE (Language pack for Ad-Aware SE)
uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\INSTALL.LOG
publisher: Lavasoft
help link: http://www.lavasoft.de

Microsoft .NET Framework 1.1 Hotfix (KB886903) (M886903)
uninstall cmd: "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp"

Microsoft .NET Framework 1.1 (Microsoft .NET Framework 1.1 (1033))
uninstall cmd: msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm

Mozilla Firefox (1.5.0.2) 1.5.0.2 (fr) (Mozilla Firefox (1.5.0.2))
install location: C:\PROGRA~1\MOZILL~1
uninstall cmd: C:\PROGRA~1\MOZILL~1\uninstall\uninstall.exe /ua "1.5.0.2 (fr)"
publisher: Mozilla

Mozilla Thunderbird (1.5) 1.5 (fr) (Mozilla Thunderbird (1.5))
install location: C:\Program Files\Mozilla Thunderbird
uninstall cmd: C:\WINDOWS\UninstallThunderbird.exe /ua "1.5 (fr)"
publisher: Mozilla

Messenger Plus! 3 (MsgPlus! Plugin)
uninstall cmd: "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /Remove

(MSI30-Beta1)

(MSI30-Beta2)

(MSI30-KB884016)

(MSI30-RC1)

(MSI30-RC2)

(MSI30a-KB884016)

(MSI31-Beta)

(MSI31-RC1)

Barre d'outils MSN (MSN Toolbar)
uninstall cmd: C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\mtbs.exe c

NVIDIA Display Driver (NVIDIA Display Driver)
uninstall cmd: C:\WINDOWS\System32\nvudisp.exe Uninstall C:\WINDOWS\System32\nvdisp.nvu,NVIDIA Display Driver

(PCHealth)
uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

PCI Audio Driver (PCI Audio Driver)
uninstall cmd: cmuninst.exe

Correctif Windows XP (SP2) Q322011 20021111.164308 (Q322011)
uninstall cmd: C:\WINDOWS\$NtUninstallQ322011$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: Pour plus d'informations, consultez Q322011 à l'adresse https://support.microsoft.com/en-us

Correctif Windows XP (SP2) Q327979 20021114.125930 (Q327979)
uninstall cmd: C:\WINDOWS\$NtUninstallQ327979$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: Pour plus d'informations, consultez Q327979 à l'adresse https://support.microsoft.com/en-us

Correctif Windows XP (SP2) Q814995 20030219.141715 (Q814995)
uninstall cmd: C:\WINDOWS\$NtUninstallQ814995$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/814995

Correctif pour le Lecteur Windows Media [Voir Q828026 pour plus d'informations] (Q828026)
uninstall cmd: C:\WINDOWS\$NtUninstallQ828026$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us/help/828026

RivaTuner v2.0 RC 15.7 (RivaTuner)
uninstall cmd: "C:\Program Files\RivaTuner v2.0 RC 15.7\uninstall.exe"

Service Pack 1a pour Windows XP (Service Pack 1a pour Windows)
uninstall cmd: C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe

Macromedia Flash Player 8 8 (ShockwaveFlash)
uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\swflash.inf,DefaultUninstall,5
publisher: Macromedia
help link: https://helpx.adobe.com/flash-player.html

Spybot - Search & Destroy 1.4 1.4 (Spybot - Search & Destroy_is1)
install location: C:\Program Files\Spybot - Search & Destroy\
uninstall cmd: "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
publisher: Safer Networking Limited

SuperCopier2 (SuperCopier2)
uninstall cmd: "C:\Program Files\SuperCopier2\SC2Uninst.exe"

UltraISO V7.66 ME (UltraISO_is1)
install location: C:\Program Files\UltraISO\
uninstall cmd: "C:\Program Files\UltraISO\unins000.exe"

Unlocker 1.8.1 1.8.1 (Unlocker)
uninstall cmd: C:\Program Files\Unlocker\uninst.exe
publisher: Cedrick Collomb

WinAce Archiver 2.6 (WinAce Archiver)
uninstall cmd: C:\Program Files\WinAce\SXUNINST.EXE C:\Program Files\WinAce\SXUNINST.INI
publisher: e-merge GmbH
help link: mailto:techsupport@winace.com

Windows Media Format Runtime (Windows Media Format Runtime)
uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll

Lecteur Windows Media 10 (Windows Media Player)
uninstall cmd: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

WinISO 5.3 (WinISO_is1)
uninstall cmd: "C:\Program Files\WinISO\unins000.exe"
publisher: WinISO Computing Inc.
help link: http://www.winiso.com

Archiveur WinRAR (WinRAR archiver)
uninstall cmd: C:\Program Files\WinRAR\uninstall.exe

WinZip 9.0 SR-1 (6224f) (WinZip)
version (major): 9
install location: C:\PROGRA~1\WINZIP\
uninstall cmd: "C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
publisher: WinZip Computing, Inc.
help link: https://www.winzip.com/win/en/xsupport.html

Zero Popup Pro (Zero Popup)
uninstall cmd: "C:\Program Files\Zero Popup\uninstall.exe"

Microsoft Office 2000 SR-1 Professional 9.00.3821 ({0001040C-78E1-11D2-B60F-006097C998E7})
version: 150998765
version (major): 9
estimated size: 172642
install date: 20060222
install source: F:\
uninstall cmd: MsiExec.exe /I{0001040C-78E1-11D2-B60F-006097C998E7}
publisher: Microsoft Corporation
help link: https://support.microsoft.com/en-us
readme: C:\Program Files\Microsoft Office\Office\ofread9.txt

J2SE Runtime Environment 5.0 Update 6 1.5.0.60 ({3248F0A8-6813-11D6-A77B-00B0D0150060})
version: 17104896
version (major): 1
version (minor): 5
estimated size: 122273
install date: 20060224
install source: http://jdl.sun.com/webapps/download/GetFile/1.5.0_06-b05/windows-i586//
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
publisher: Sun Microsystems, Inc.
contact: https://www.java.com/en/
help link:

--
Frédéric
pas très fort en info

bon revoilà un HijackThis:

Logfile of HijackThis v1.99.1
Scan saved at 14:17:47, on 17/04/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\Mixer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Eraser\eraser.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Propriétaire\Bureau\protege PC\Formatage & Sécurité\protection de données personnelles\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {8FE99860-6F43-4D08-999D-06713E419426} - (no file)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CBitSpirit] "C:\Program Files\BitSpirit\BitSpirit.exe" /start
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide
O4 - HKCU\..\Run: [msn] C:\Program Files\MSN\MSNCoreFiles\MSN6.EXE -email
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: Télécharger avec &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - http://runonce.msn.com/setacceptlang.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: C:\Program Files\Agnitum\Outpost Firewall 1.0\wl_hook.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

puis je viens de voir ce que j'avais avec l'antivirus de avast:

Le virus as été détruit !
Nom du fichier : mcbstmib.dll
ID du fichier : 1
Description du Virus : Win32:Trojano-3384 [Trj]
Nom du fichier : mcbstmib.dll

Le programme va essayer de scanner le(s) 1 fichier(s) sélectionné(s) de la zone de quarantaine

Déplacer les fichiers vers le dossier temporaire : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_avast4_\unp115887014.tmp
ID du fichier : 0000000001 Nom original : C:\WINDOWS\system32\mcbstmib.dll Nouveau dossier : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_avast4_\unp115887014.tmp\1.dll

Scan des fichiers du dossier temporaire : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_avast4_\unp115887014.tmp
C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_avast4_\unp115887014.tmp\1.dll\[UPX] Win32:Trojano-3384 [Trj]
C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_avast4_\unp115887014.tmp\1.dll -- pas de virus --

Le virus as été détruit !
Nom du fichier : themeuid.dll
ID du fichier : 2
Description du Virus : Win32:Trojano-3384 [Trj]

Le programme va essayer de scanner le(s) 1 fichier(s) sélectionné(s) de la zone de quarantaine

Déplacer les fichiers vers le dossier temporaire : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_avast4_\unp12897808.tmp
ID du fichier : 0000000002 Nom original : C:\WINDOWS\system32\themeuid.dll Nouveau dossier : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_avast4_\unp12897808.tmp\2.dll

Scan des fichiers du dossier temporaire : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_avast4_\unp12897808.tmp
C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_avast4_\unp12897808.tmp\2.dll Win32:Trojano-3384 [Trj]

mais il me reste encore le WIN32:SWIZZOR.BH ou swizzor.dh
et le trojan.lopad.k et trojan.downloader.6588 E

aidez-moi à m'en débarasser puis en plus je n'ai pas de pare-feu

voilà,merci de bien vouloir m'aider le plus possible

a+++

......
sujet non résolu

--
Frédéric
pas très fort en info

bon là un rapport de CleanUp dont j'ai déjà supprimé les choses:

CleanUp! started on 04/17/06 21:06:50.
C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\MSHist012006041720060418\index.dat currently in use. Will be deleted when Windows is restarted.
'Typed URLs' (Internet Explorer) - removed from the registry.
C:\Documents and Settings\Propriétaire\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\6r15pz6b.default\history.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\6r15pz6b.default\cookies.txt.old - deleted
C:\WINDOWS\temp\JET959F.tmp currently in use. Will be deleted when Windows is restarted.
C:\WINDOWS\temp\Perflib_Perfdata_130.dat currently in use. Will be deleted when Windows is restarted.
C:\WINDOWS\temp\Perflib_Perfdata_75c.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\locals~1\tempor~1\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\locals~1\tempor~1\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf - deleted
C:\WINDOWS\Prefetch\MSNAPPAU.EXE-0B0F6395.pf - deleted
C:\Documents and Settings\LocalService\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\MSHist012006041720060418\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\WINDOWS\system32\CatRoot2\edb.chk - deleted
C:\WINDOWS\Temp\JET959F.tmp currently in use. Will be deleted when Windows is restarted.
'Run MRU' list - removed from the registry.
Paint Recent File List - removed from the registry.
Telnet's MRU list - removed from the registry.
WinZip Extract MRU list - removed from the registry.
WinZip File MRU list - removed from the registry.
CleanUp! 4.0 recovered 66.1 KB of disk space from 4 files.
CleanUp! finished on 04/17/06 21:07:54.

Voilà,demain je t'enverrais un rapport d'avast antivirus dont je vais analysé mon pc cette nuit

voià,a+++,a demain vers 11h00.

@Utilisateur anonyme--
Frédéric
pas très fort en info

re,Bonjour,té là,

Bon voilà il m'a rien détecté comme virus mon avast 4.6 antivirus mais bon quand j'étais obligé d'installer WinAntivirus pro 2006, je devais obligatoirement détruire ces chevals de troie et en plus l'antivirus WinAntivirus n'étais pas gratuit donc j'ai utilisé avast et winantivirus pro 2006 pour les détruire:

Trojan downloader 6588 E
Trojan Swizzor DH ou BH ( soit DH ou BH ) et
Trojan Lopad K

et comme décrit plus haut, mon antivirus avast m'a détruit ceci:

Le virus as été détruit !
Nom du fichier : mcbstmib.dll
ID du fichier : 1
Description du Virus : Win32:Trojano-3384 [Trj]
Nom du fichier : mcbstmib.dll

et

e virus as été détruit !
Nom du fichier : themeuid.dll
ID du fichier : 2
Description du Virus : Win32:Trojano-3384 [Trj]

donc je penses qu'il doit rester des choses à détruire

voilà,dit moi si tu ne trouves rien de suspect avec le message d'hier etc.......

--
Frédéric
pas très fort en info

Re

bon voilà, je vais vous mettre des rapports d'avast:

le journal des avertissements:

15/04/2006 09:02:21 Propriétaire 1640 Sign of "Win32:Swizzor-gen [Trj]" has been found in "C:\Documents and Settings\Propriétaire\Application Data\mediadoes\32 send.exe" file.

15/04/2006 09:03:30 Propriétaire 1640 Sign of "Win32:Swizzor-gen [Trj]" has been found in "C:\Documents and Settings\Propriétaire\Application Data\program flaw mess\eacwpzvq.exe" file.

15/04/2006 09:03:30 Propriétaire 1640 Sign of "Win32:Swizzor-gen [Trj]" has been found in "C:\Documents and Settings\Propriétaire\Application Data\program flaw mess\hnizxdqa.exe" file.

15/04/2006 09:03:30 Propriétaire 1640 Sign of "Win32:Swizzor-gen [Trj]" has been found in "C:\Documents and Settings\Propriétaire\Application Data\program flaw mess\spamencnounonce.exe" file.

15/04/2006 09:03:30 Propriétaire 1640 Sign of "Win32:Swizzor-gen [Trj]" has been found in "C:\Documents and Settings\Propriétaire\Application Data\program flaw mess\trust one barb.exe" file.
15/04/2006 09:03:31 Propriétaire 1640 Sign of "Win32:Swizzor-gen [Trj]" has been found in "C:\Documents and Settings\Propriétaire\Application Data\program flaw mess\vuhqbbwg.exe" file.

15/04/2006 09:39:04 Propriétaire 1764 Sign of "Win32:Swizzor-gen [Trj]" has been found in "c:\documents and settings\all users\application data\nurb poll body size\plan noun.exe" file.

15/04/2006 10:12:37 Propriétaire 408 Function setifaceUpdatePackages() has failed. Return code is 0x000004C7, dwRes is 000004C7.

15/04/2006 10:13:09 Propriétaire 408 Sign of "Win32:Swizzor-gen [Trj]" has been found in "C:\Documents and Settings\All Users\Application Data\Nurb Poll Body Size\win each.exe" file.



le journal des conseils:

15/04/2006 21:32:37 SYSTEM 1476 VRDB (Virus Recovery Database) generation was successfully completed.

le journal des erreurs:

15/04/2006 08:48:59 Propriétaire 1716 Error in aswChestC: chestOpenList Error 1753.

15/04/2006 08:48:59 Propriétaire 1716 aswChestInterface - Program error description: CChestListView::LoadFiles() chestOpenList() failed: 2147422219.

15/04/2006 08:49:29 Propriétaire 1716 aswChestInterface - Program error description: CChestListView::OnCreate() !m_strErrorWnd.IsEmpty().

15/04/2006 10:10:08 Propriétaire 536 Error in aswChestC: chestOpenList Error 1753.

15/04/2006 10:10:08 Propriétaire 536 aswChestInterface - Program error description: CChestListView::LoadFiles() chestOpenList() failed: 2147422219.

15/04/2006 10:10:10 Propriétaire 536 aswChestInterface - Program error description: CChestListView::OnCreate() !m_strErrorWnd.IsEmpty().

15/04/2006 10:14:34 Propriétaire 408 Error in aswChestC: chestAddFile Error 1753.

15/04/2006 10:14:54 Propriétaire 408 Error in aswChestC: chestAddFile Error 1753.

15/04/2006 11:11:07 Propriétaire 1932 Error in aswChestC: chestOpenList Error 1753.

15/04/2006 11:11:07 Propriétaire 1932 aswChestInterface - Program error description: CChestListView::LoadFiles() chestOpenList() failed: 2147422219.

15/04/2006 11:11:09 Propriétaire 1932 aswChestInterface - Program error description: CChestListView::OnCreate() !m_strErrorWnd.IsEmpty().


et le rapport de tous les lecteurs locaux:

14/04/2006 21:40
Analyse de tous les lecteurs locaux
Fichier C:\WINDOWS\system32\mcbstmib.dll\[UPX] est infecté par Win32:Trojano-3384 [Trj], Mis en quarantaine
Fichier C:\WINDOWS\system32\themeuid.dll est infecté par Win32:Trojano-3384 [Trj], Mis en quarantaine

Nombre de dossiers parcourus : 3175
Nombre de fichiers analysés : 37313
Nombre de fichiers infectés : 2

----------------------------------------
15/04/2006 09:56
Analyse de tous les lecteurs locaux
Fichier C:\Documents and Settings\All Users\Application Data\Nurb Poll Body Size\win each.exe est infecté par Win32:Swizzor-gen [Trj]
Analyse interrompue

Nombre de dossiers parcourus : 85
Nombre de fichiers analysés : 547
Nombre de fichiers infectés : 1

----------------------------------------
15/04/2006 11:14
Analyse de C:\
Fichier C:\Documents and Settings\Propriétaire\Local Settings\Temp\bis18.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\Program Files\Adverts\uninst.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP159\A0114809.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP159\A0116036.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP159\A0116173.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP159\A0116313.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP159\A0116983.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP159\A0117194.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP162\A0118707.dll\[UPX] est infecté par Win32:Trojano-3384 [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP162\A0118708.dll est infecté par Win32:Trojano-3384 [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP162\A0120713.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP162\A0120714.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP162\A0120715.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP162\A0120716.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP162\A0120717.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP162\A0120718.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP162\A0120747.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP162\A0120755.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé
Fichier C:\System Volume Information\_restore{3A5B8FDC-02F3-486D-A029-5E5A1447F68F}\RP162\A0120777.exe est infecté par Win32:Swizzor-gen [Trj], Supprimé

Analyse de D:\

Analyse de E:\

Nombre de dossiers parcourus : 3145
Nombre de fichiers analysés : 138884
Nombre de fichiers infectés : 19

voilà, merci de bien m'aider et voir toous mes rapports depuis le début

voilà a+